Feature DSL: mainCriticalPaths() which provide a minimal set of attack path
Hello ! i would propose a feature of DSL language. I've seen when i make request with criticalPaths(), we have a set of critical paths, and the parameter (int maxHops) is used to define the depth.
When i launch criticalPaths by hands like :
kh.endpoints()
.outE()
.inV()
.has("image","exemple")
.repeat(
outE()
.inV()
.simplePath()
)
.until(
has("class","PermissionSet")
.has("critical",true)
)
.dedup() # dedup delete all redundant path
.path()
.by(elementMap())
What do you think it's intresting feature to propose mainCriticalPaths() ?This feature provide a minimal overview of what attackers can generally do with a specific resource.
Hi @theoberthier,
I will look at this and provide you with feedback in the week.
Thank you.
Hi @theoberthier,
We didn't have time to discuss this internally this week, I will try to provide you with feedback next week.
Thank you.